GDPR
Declaration of the processing of personal data according to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data and the instruction of data subjects (hereinafter referred to as “GDPR”).
1. Administrator of personal data
The administrator of personal data is the company:
Cleaning – Cleaning s.r.o. ID: 19149328
Vojtěšská 211/6, Nové Město, 110 00 Prague 1
Phone: +420 601 200 070
Email: info@uklidcisteni.cz
, (hereinafter referred to as the “administrator”), which hereby, in accordance with Art. 12 GDPR informs about the processing of your personal data and about your rights.
When processing personal data, we honor and respect personal data protection standards and adhere to the principles: we always process personal data for a clearly and comprehensibly defined purpose, defined means and method only for the time that is absolutely necessary. We collect the personal data of our clients and employees only to the extent necessary and do not pass them on to third parties, with the exception of those who are directly involved in processes within the company for the purpose of their necessary processing. Collaborating persons (employees, subcontractors) are forced to subscribe to the administrator’s personal data processing policies and undergo regular training. As a data administrator, the company has created the function of a Personal Data Protection Officer (DPO), which oversees the proper protection of personal data of its owners, i.e. the company’s customers. The contact for the DPO is published in a remotely accessible way on the administrator’s (company’s) website.
2. Scope of personal data processing
Personal data are processed to the extent that the relevant subject of the data has been provided to the controller, in connection with the conclusion of a contractual or other legal relationship with the controller, for reasons of legitimate interest, or that the controller has otherwise collected and processed in accordance with applicable legal regulations or to fulfill the administrator’s legal obligations
3. Sources of personal data
– directly from data subjects (registration, web contact forms and chat, e-mail, phone, website, business cards, etc.)
– publicly accessible registers, lists and evidence (e.g. commercial register, trade register, real estate register, etc.)
– automated recording of electronic communications based on Act 127/2005 Coll. and Decree 357/2012 Coll.
4. Categories of personal data that are the subject of processing
– address and identification data used for unambiguous and unmistakable identification of the data subject (e.g. first name, surname, title, possibly birth number, date of birth, address of permanent residence, ID number, VAT number) and data enabling contact with the data subject (contact data – e.g. . contact address, telephone number, fax number, e-mail address and other similar information)
– IP addresses, phone numbers and other operational and location data resulting from the operation of services collected and stored due to legal obligation
– IP addresses and other operational and location data to the extent necessary to maintain the quality of services
– descriptive data (e.g. bank details)
– other data necessary for the performance of the contract
– data provided beyond the scope of relevant laws, processed within the framework of consent granted by the subject (photo processing, use of personal data for the purpose of personnel management, etc.)
5. Purpose of personal data processing
– purposes contained within the data subject’s consent
– negotiating a contractual relationship
– performance contract
– protection of the rights of the administrator, beneficiary or other affected persons (e.g. enforcement of the administrator’s claims)
– archiving conducted on the basis of the law
– tenders for vacancies
– fulfillment of legal obligations by the administrator
6. Method of processing and protection of personal data
The processing of personal data is carried out by the administrator. The processing is carried out in its establishments, branches and the administrator’s headquarters by individual authorized employees of the administrator, or processor. The processing takes place through computer technology, or also manually for personal data in paper form, subject to compliance with all security principles for the management and processing of personal data. For this purpose, the administrator has adopted technical and organizational measures to protect personal data, in particular measures to prevent unauthorized or accidental access to personal data, their alteration, destruction or loss, unauthorized transfers, their unauthorized processing, as well as other misuse of personal data. All entities to which personal data may be made available respect the rights of data subjects to protect privacy and are subject to applicable legal regulations relating to the protection of personal data.
7. Time of personal data processing
In accordance with the deadlines in the relevant contracts, in the administrator’s file and shredding regulations or in the relevant legal regulations, this is the time absolutely necessary to ensure the rights and obligations arising both from the contractual relationship and from the relevant legal regulations.
Typically, personal data is processed in full only for the duration of the contractual relationship, and after the expiry of the contract, it is processed only within the framework of legal regulations.
During the duration of the contract, operational and location data are processed continuously